This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/KIqHcyHjzUZJ3cC9r4o9D_YRiaE.roa File: KIqHcyHjzUZJ3cC9r4o9D_YRiaE.roa (raw, json) Hash identifier: Wjg6EvOWdh1EArjC2HdiYoGrTNwnd1GKg0SQ1DQtlJM= Subject key identifier: 28:8A:87:73:21:E3:CD:46:49:DD:C0:BD:AF:8A:3D:0F:F6:11:89:A1 Certificate issuer: /CN=31828c99d35cb92e2d53daf128e497e841b63ab0 Certificate serial: 019B7F850893FD189BE4B6CEB2E96B5EDEA2 Authority key identifier: 31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/KIqHcyHjzUZJ3cC9r4o9D_YRiaE.roa Signing time: Fri 02 Jan 2026 16:23:03 +0000 ROA not before: Fri 02 Jan 2026 16:23:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198138 IP address blocks: 95.130.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:08:93:fd:18:9b:e4:b6:ce:b2:e9:6b:5e:de:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31828c99d35cb92e2d53daf128e497e841b63ab0 Validity Not Before: Jan 2 16:23:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=288a877321e3cd4649ddc0bdaf8a3d0ff61189a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:93:9c:e2:ac:6e:8e:0a:e0:a5:60:4b:b3:57: b7:b9:2c:58:59:50:8a:6b:07:64:c3:b1:a7:62:5b: 1c:2e:91:c2:4e:07:5f:a5:64:4c:ff:4d:f8:e4:a9: eb:ac:2c:c1:d4:20:da:01:76:e9:45:f8:66:65:01: 66:a8:b7:7c:0a:37:5c:39:e8:b4:94:81:2c:f7:f7: 9d:73:e9:65:43:80:03:17:09:e9:4c:bd:50:0b:5b: b7:f2:a9:bf:7f:bd:26:9d:ea:83:f2:55:26:bb:e4: cf:02:ec:b0:d0:27:fd:b1:c1:b8:f9:06:24:ba:2a: 98:5e:c2:78:81:f6:cb:4e:07:59:3f:40:2d:14:e6: 96:50:4a:d4:f3:9f:ba:72:bf:dc:e2:3b:06:40:9a: 05:e1:9e:e4:7c:b8:3e:c3:04:ea:fe:1a:8c:02:24: 9c:d2:f6:07:5c:d2:54:76:84:a2:f1:d0:3e:61:db: d3:99:2f:d8:b6:b2:32:ba:04:20:12:7f:20:6b:26: ed:89:47:4f:3b:5b:34:7d:61:a8:d7:11:08:5a:2c: ab:d9:98:d2:c9:d3:98:4a:e6:19:62:0e:0b:aa:4e: 23:e5:cb:f1:59:5a:08:3d:53:d9:9d:49:06:75:98: 37:d0:52:68:a2:fa:8e:9d:ee:a3:e6:52:2f:26:c9: c7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8A:87:73:21:E3:CD:46:49:DD:C0:BD:AF:8A:3D:0F:F6:11:89:A1 X509v3 Authority Key Identifier: keyid:31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/KIqHcyHjzUZJ3cC9r4o9D_YRiaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.130.39.0/24 Signature Algorithm: sha256WithRSAEncryption 02:37:d1:29:c3:66:0e:0a:6e:ce:e5:4c:e3:dd:75:a4:cd:af: 93:8d:99:64:54:06:86:b9:14:74:49:4e:a0:f1:a6:23:b5:a9: 12:a6:78:cf:ae:03:c6:6e:1f:0e:9b:83:b6:15:75:18:96:91: df:c6:1d:9d:d2:a0:f7:a9:d6:58:80:7a:ff:6f:a4:14:f9:e5: af:45:48:61:a7:7b:3c:21:7b:9e:eb:60:da:c0:69:88:3d:b2: 75:42:83:f4:c7:c0:15:6a:d8:73:7e:0a:e1:2a:1f:05:16:f8: b3:31:69:25:ae:77:df:06:29:56:12:9f:fb:e5:2a:40:b2:53: b5:92:1a:a8:32:db:d1:b3:3f:a3:a9:19:43:5a:d5:6e:39:f8: e6:64:4d:ad:6a:22:ae:86:d4:bf:9f:2b:6c:28:7d:37:5a:44: 74:74:fe:1e:b3:c6:ac:18:81:a2:ea:99:5f:fe:3e:a0:11:9b: d9:8f:2d:0f:e8:02:40:a5:c8:a4:fc:e4:aa:41:9d:f6:4c:cf: 8e:96:58:62:7e:61:31:e8:99:53:21:64:95:a8:7d:39:55:6d: b3:2a:5f:01:0e:f7:ad:6f:99:d6:4c:79:10:7c:0b:6f:d3:fc: 2a:0c:84:d8:4d:a8:f7:e7:7a:7e:21:7e:0c:08:d6:cb:ad:c6: 16:6b:68:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hQiT/Rib5LbOsulrXt6iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODI4Yzk5ZDM1Y2I5MmUyZDUzZGFmMTI4ZTQ5N2U4NDFi NjNhYjAwHhcNMjYwMTAyMTYyMzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODhhODc3MzIxZTNjZDQ2NDlkZGMwYmRhZjhhM2QwZmY2MTE4OWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5Oc4qxujgrgpWBLs1e3uSxYWVCK awdkw7GnYlscLpHCTgdfpWRM/0345KnrrCzB1CDaAXbpRfhmZQFmqLd8CjdcOei0 lIEs9/edc+llQ4ADFwnpTL1QC1u38qm/f70mneqD8lUmu+TPAuyw0Cf9scG4+QYk uiqYXsJ4gfbLTgdZP0AtFOaWUErU85+6cr/c4jsGQJoF4Z7kfLg+wwTq/hqMAiSc 0vYHXNJUdoSi8dA+YdvTmS/YtrIyugQgEn8gaybtiUdPO1s0fWGo1xEIWiyr2ZjS ydOYSuYZYg4Lqk4j5cvxWVoIPVPZnUkGdZg30FJoovqOne6j5lIvJsnHTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCiKh3Mh481GSd3Ava+KPQ/2EYmhMB8GA1UdIwQY MBaAFDGCjJnTXLkuLVPa8Sjkl+hBtjqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlLTW1kTmN1UzR0VTlyeEtPU1g2RUcyT3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82Y2JhMWEtNWY0ZC00MzA4LWJmNDYt ZWIzN2E4NWE4MmM1LzEvS0lxSGN5SGp6VVpKM2NDOXI0bzlEX1lSaWFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82Y2JhMWEtNWY0ZC00MzA4LWJmNDYtZWIzN2E4NWE4MmM1 LzEvTVlLTW1kTmN1UzR0VTlyeEtPU1g2RUcyT3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4InMA0G CSqGSIb3DQEBCwUAA4IBAQACN9Epw2YOCm7O5Uzj3XWkza+TjZlkVAaGuRR0SU6g 8aYjtakSpnjPrgPGbh8Om4O2FXUYlpHfxh2d0qD3qdZYgHr/b6QU+eWvRUhhp3s8 IXue62DawGmIPbJ1QoP0x8AVathzfgrhKh8FFvizMWklrnffBilWEp/75SpAslO1 khqoMtvRsz+jqRlDWtVuOfjmZE2taiKuhtS/nytsKH03WkR0dP4es8asGIGi6plf /j6gEZvZjy0P6AJApcik/OSqQZ32TM+OllhifmEx6JlTIWSVqH05VW2zKl8BDvet b5nWTHkQfAtv0/wqDITYTaj353p+IX4MCNbLrcYWa2jX -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:11 2026 by rpki-client